Privacy policy
Effective 2026-11-05. This policy explains what Tenhatch ("we") does with personal data when you use AccessDiff (https://accessdiff.com). Questions: support@tenhatch.com.
What we collect
| Data | Why | Kept |
|---|---|---|
| Email address and sign-in metadata | To create your account and sign you in | While the account exists |
| Billing details (name, country, last 4 digits of the card) | Processed by our payment provider to charge you; we never see full card numbers | 7 years (tax law) |
| Sites you add and their scan results (page URLs and titles, element selectors and short element snippets, issue lists, scores, reports) | To run the scans, show what changed and send the reports | While the site is on your account and 12 months after |
| Addresses scanned with the free instant scan | To run the scan and measure the service | 30 days (technical logs only; the result is not stored) |
| Usage records (what was requested, when, through which door: web app, API or agent) | To meter your plan and bill pay-as-you-go use | 13 months |
| Support messages | To answer you | 2 years |
| Technical logs (IP address, user agent, request ids) | Security, abuse prevention, debugging | 30 days |
| Email address you give the waitlist form before AccessDiff opens, and the date | To email you when it opens, and more only if you ask | Until you unsubscribe or ask us to delete it |
We do not sell personal data and we do not use your content to train models. Scans only load pages that are reachable without signing in; the crawler keeps no cookies and collects nothing about the visitors of the sites it scans.
Processors
We rely on a small number of service providers who process data on our behalf under data processing agreements: authentication and database hosting (Supabase; the waitlist is stored by the Tenhatch studio's own database, also at Supabase), payments (Stripe), transactional email (Resend), the support assistant (Anthropic), hosting (Vercel) and the background workers that run scans (Fly.io). Each receives only the data needed for its job.
Cookies
We use strictly necessary cookies for sign-in sessions. There are no advertising cookies and no third-party tracking cookies.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to complain to a supervisory authority. Email support@tenhatch.com and we will respond within 30 days. Deleting your account from the account page removes your personal data except what we must keep by law.
International transfers
Our providers may process data outside your country. Where required, transfers are protected by standard contractual clauses or equivalent safeguards.
Changes
We will announce material changes to this policy by email or in the application before they take effect.
Tenhatch, 26500 W Agoura Rd, Ste 102 #549, Calabasas, CA 91302, United States